Examkin

Soru

Zorluk: OrtaIdentity and Access Management (IAM)

A newly formed cloud engineering team needs to perform daily administrative duties, such as configuring network settings and launching Amazon EC2 instances. Which approach represents the AWS-recommended best practice for securing the AWS account root user while enabling these tasks?

  1. Enable multi-factor authentication (MFA) on the root user, lock away its credentials, and create an IAM user with administrative permissions for daily tasks.Cevap
  2. B
    Share the root user credentials among the cloud engineering team and enable multi-factor authentication (MFA) on their individual mobile devices.
  3. C
    Configure an IAM role with administrative permissions and assign it permanently to the root user for daily administrative activities.
  4. D
    Rely on AWS to automatically manage and restrict access to the root user account, as AWS is solely responsible for root credential security under the Shared Responsibility Model.

Cevap

Enable multi-factor authentication (MFA) on the root user, lock away its credentials, and create an IAM user with administrative permissions for daily tasks.
The correct answer is to enable multi-factor authentication (MFA) on the root user, lock its credentials, and create an IAM user with administrator access for daily tasks. This aligns with the AWS Security best practice of minimizing the use of the root account and ensuring that daily tasks are performed using standard identities with restricted or monitored access.

Adım Adım Çözüm

1
Secure the AWS account root user by enabling Multi-Factor Authentication (MFA) and locking its credentials.
The root account is protected against unauthorized access, even if the primary password is leaked.
The root user has unrestricted access to all resources and billing, making its protection the highest priority.
2
Create individual IAM users for administrative tasks and assign administrative permissions.
Daily operations are performed using identities with auditable actions and permissions that can be restricted if necessary.
AWS recommends limiting root account usage to only a small subset of specific tasks, performing all other administrative operations via IAM.

Anahtar Kavram

AWS Root Account Security and IAM Best Practices
Bu soruyu puanla

Konular

Identity and Access Management (IAM)

Bu konudan daha fazla soru